Certificate

$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer
File:                     ZwbZhOcxaBICGI0pntNfAFsBdYA.cer (raw, json)
Hash identifier:          sB3biiTaIvvkLLxA87BmBj/YIyzwR9lHVWLMRIrzByE=
Subject key identifier:   67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer:       /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial:       01C91F
Authority info access:    rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest:                 rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
caRepository:             rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/
Notify URL:               https://rrdp.apnic.net/notification.xml
Certificate not before:   Mon 06 Nov 2023 14:45:44 +0000
Certificate not after:    Mon 30 Dec 2024 00:00:00 +0000
Subordinate resources:    AS: 17564
                          IP: 103.8.160.0/22
                          IP: 150.242.180.0/22
                          IP: 202.75.4.0/22
                          IP: 2401:b00::/32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 06:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117023 (0x1c91f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Nov  6 14:45:44 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=A917DCDA/serialNumber=6706D984E731681202188D299ED35F005B017580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:aa:81:92:2b:15:9f:bf:d2:b8:fc:a3:a6:
                    6a:32:84:b6:1e:62:e9:f6:db:8e:d8:c9:bf:87:cf:
                    67:47:72:e4:5c:5f:94:aa:37:ae:58:60:ca:7a:84:
                    63:b6:cb:07:ea:48:a9:39:2c:e3:6e:94:d1:c1:69:
                    ff:fc:4a:55:f9:d7:81:ff:2e:57:87:49:a3:fc:c2:
                    fe:25:50:d2:1a:aa:dd:31:14:7a:91:b4:36:c2:17:
                    14:3a:44:65:70:03:cc:8d:93:05:8b:ec:16:7b:d0:
                    8d:03:59:af:43:98:15:39:3c:df:82:63:2e:16:76:
                    06:a2:f1:b3:79:b8:04:30:7a:51:8f:93:69:a3:68:
                    4b:42:c2:f5:6b:ba:ee:2b:db:1d:0f:a2:94:1d:e0:
                    14:0a:77:90:d1:09:b0:84:00:8c:cd:45:29:a9:26:
                    2c:6e:3a:2b:34:c4:2a:a8:b2:b1:4d:63:62:78:65:
                    3b:ff:b1:25:4b:fa:d0:34:91:97:82:76:eb:10:2b:
                    af:03:c8:7b:8f:a8:40:12:d9:1a:eb:5f:44:13:27:
                    92:f4:f0:8f:b5:15:62:78:d9:84:4b:74:23:8c:69:
                    eb:ad:5b:f8:9e:68:de:ff:7d:89:9b:c1:15:db:8e:
                    42:c6:2b:54:8f:8a:9a:52:6a:2b:81:a9:ee:33:e2:
                    8f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80
            X509v3 Authority Key Identifier:
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17564

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.160.0/22
                  150.242.180.0/22
                  202.75.4.0/22
                IPv6:
                  2401:b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:a0:0a:c0:6c:6c:b1:a4:27:44:b9:1b:1c:c8:92:de:97:f0:
         4e:58:ad:b0:b7:f9:c5:ba:d7:d3:f4:68:d1:17:4c:f8:17:0b:
         5e:54:4a:54:3c:46:07:a2:78:89:13:3e:85:a5:e2:c4:cb:2a:
         4c:5b:1b:ec:76:9a:7e:ff:a1:25:aa:ac:ad:80:96:e6:fc:44:
         ab:1b:ca:b3:78:38:ff:4f:3e:5a:2f:5e:cf:46:2c:81:5b:b3:
         f8:dd:8f:cc:88:b6:16:24:62:43:a7:c6:bf:22:a9:e2:2e:f5:
         f4:8a:bf:3a:a6:21:5b:27:32:20:5d:9b:ea:22:2b:ec:e1:34:
         7c:79:6e:72:0f:28:51:aa:a1:ea:9d:e9:6a:78:22:8a:26:be:
         a1:73:09:14:48:b6:94:b5:28:1f:b2:1d:0a:3a:3e:6d:d1:cb:
         b2:c4:55:d0:46:a1:cf:b3:8f:18:18:3e:57:3c:58:74:7f:3e:
         bd:0d:bf:05:b8:2d:9a:b1:9b:4d:c1:07:54:48:de:a6:c1:d5:
         c1:6b:b4:45:95:a6:6f:e4:28:16:3f:10:8d:9b:ab:e7:cf:18:
         2f:f0:79:69:c4:e1:68:7d:e9:02:f4:29:b2:c3:99:73:92:92:
         48:2a:3d:46:3d:d3:75:56:4b:87:b1:24:fc:96:b9:ed:aa:c0:
         ae:93:86:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:43:28 2024 by rpki-client on console-fra.rpki-client.org